Set Up an Authenticator App

Overview

An authenticator app gives you a new 6-digit code every 30 seconds. When you sign in to BetterUnite with your password, you enter the current code from the app as a second step. It works without cell service, and it's more secure than codes sent by text message, which can be intercepted.

You can use any standard authenticator app, such as Google Authenticator, Microsoft Authenticator or 1Password.

You can turn on an authenticator app yourself at any time. If your organization requires one, you'll be asked to set it up the next time you sign in.

Before you start

Install an authenticator app on your phone.
Have a safe place ready to store your recovery codes, such as a password manager.

Turn on the authenticator app

Sign in to BetterUnite.
Click your name or picture in the top right corner, then choose User Settings.
On the Authenticator App card, click Set up authenticator app.
Open the authenticator app on your phone and add a new account.
Scan the QR code on the screen with the app. If you can't scan it, enter the key shown under Can't scan it? in the app instead.
Type the 6-digit code the app shows for BetterUnite, then click Verify and turn on.

Save your recovery codes

Next, BetterUnite shows you 10 recovery codes. Each code lets you sign in once if you lose your phone.

Click Copy codes and paste them somewhere safe, such as a password manager.
Optionally, add a backup phone number under Add a backup phone number. If you ever lose access to your authenticator app, we can text you a sign-in code instead. Click Text me a code, then enter the code you receive and click Verify phone.
Click I've saved them, continue.

Important: The recovery codes are shown only once. If you close the page without saving them, you can get a new set from User Settings.

The Authenticator App card now shows On, along with how many recovery codes you have left.

Set it up when your organization requires it

If your organization requires two-step verification, you'll be asked to set it up right after you enter your password.

If you're offered a choice, pick Authenticator app (marked Recommended) and follow the same steps as above: scan the QR code, enter the code, and save your recovery codes.
If your organization requires an authenticator app or passkey, you go straight to the setup page. If you already have a trusted phone number, we'll first text you a code to confirm it's you, then you set up the app.

Sign in with your authenticator app

Sign in with your email and password.
On the Verify your identity page, open your authenticator app.
Enter the 6-digit code shown for BetterUnite and click Continue.

If you don't have your phone, choose another option under Don't have your phone?:

Use a recovery code: enter one of the codes you saved. Each one works once.
Use a passkey instead: shown if you've added a passkey.
Text me a code instead: shown if you have a trusted phone number and your organization allows text message codes.

Manage your authenticator app

Get new recovery codes

In User Settings, on the Authenticator App card, click Get new recovery codes. You get a new set of 10, and your old codes stop working. Do this when you're running low or if you think someone has seen your codes.

Move to a new phone

Many authenticator apps (such as Google Authenticator, Microsoft Authenticator and 1Password) can transfer or back up your accounts to a new phone. Check your app's settings before you reset your old phone.

If you can't transfer it:

If your organization doesn't require an authenticator app, click Remove authenticator app in User Settings, then set it up again on your new phone.
If your organization requires one, the Remove button isn't available. Ask an administrator of your organization to reset your two-step verification, then set up the app again the next time you sign in.

Turn off the authenticator app

In User Settings, on the Authenticator App card, click Remove authenticator app and confirm. You'll stop being asked for its codes when you sign in. This option isn't available if your organization requires an authenticator app or passkey.

Troubleshooting

My code isn't accepted

Make sure you're entering the code for BetterUnite, not another account in the app.
Codes change every 30 seconds. Enter the current one before it changes.
Check that your phone's date and time are set automatically. A phone clock that's off by a few minutes produces wrong codes.

It says too many incorrect codes

After 5 incorrect codes in a row, sign-in verification is locked for 15 minutes. Wait, then try again.

I lost my phone and my recovery codes

Ask an administrator of your organization to reset your two-step verification. You'll set it up again the next time you sign in.